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Abstract 

The entanglement of a pure state of a pair of quantum systems is defined 
as the entropy of either member of the pair. The entanglement of formation 
of a mixed state p is defined as the minimum average entanglement of an 
ensemble of pure states that represents p. An earlier paper [Phys. Rev. 
Lett. 78, 5022 (1997)] conjectured an explicit formula for the entanglement 
of formation of a pair of binary quantum objects (qubits) as a function of 
their density matrix, and proved the formula to be true for a special class 
of mixed states. The present paper extends the proof to arbitrary states of 
this system and shows how to construct entanglement-minimizing pure-state 
decompositions. 
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Entanglement is the feature of quantum mechanics that allows, in princi- 
ple, feats such as teleportation [|l| and dense coding [|| and is what Schrodinger 
called "t/ie characteristic trait of quantum mechanics [^." A pure state of a 
pair of quantum systems is called entangled if it does not factorize, that is, if 
each separate system does not have a pure state of its own. A classic example 
is the singlet state of two spin-^ particles, ^(| ti) — | it)), in which neither 
particle has a definite spin direction. A mixed state is entangled if it cannot 
be represented as a mixture of factorizable pure states. In the last couple of 
years a good deal of work has been devoted to finding physically motivated 
measures of entanglement, particularly for mixed states of a bipartite system 
[|, 1^, ^. Perhaps the most basic of these measures is the entanglement of 
formation, which is intended to quantify the resources needed to create a 
given entangled state 0. 

Having a well justified and mathematically tractable measure of entan- 
glement is likely to be of value in a number of areas of research, including 
the study of decoherence in quantum computers 0] and the evaluation of 
quantum cryptographic schemes Q]. Unfortunately, most proposed measures 
of entanglement involve extremizations which are difficult to handle analyti- 
cally; the entanglement of formation is no exception to this rule. However, in 
the special case of entanglement between two binary quantum systems such 
as the spin of a spin-| particle or the polarization of a photon — systems that 
are generically called "qubits" — an explicit formula for the entanglement of 
formation has recently been conjectured and has been proved for a special 
class of density matrices . In this Letter we prove the formula for arbitrary 
states of two qubits. 

The entanglement of formation is defined as follows 0. Given a den- 
sity matrix p of a pair of quantum systems A and B, consider all possible 
pure-state decompositions of p, that is, all ensembles of states lifji) with prob- 
abihties Pi such that 

i 

For each pure state, the entanglement E is defined as the entropy of either 
of the two subsystems A and B [Q : 

-E(^) = -Tr {pA log2 Pa) = -Tr (ps loga Pb) ■ (2) 
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Here pA is the partial trace of \^){'ip\ over subsystem I?, and pb is defined 
similarly. The entanglement of formation of the mixed state p is then de- 
fined as the average entanglement of the pure states of the decomposition, 
minimized over all decompositions of p: 

E{p) = mm J2piE{ij,). (3) 

i 

The basic equation (|]) is justified by the physical interconvertibility of a 
collection of pairs in an arbitrary pure state {ip) and a collection of pairs in 
the standard singlet state, the asymptotic conversion ratio being given by 
E{ip) [Q. The central claim of this Letter is that for a pair of qubits, the 
minimum value specified in Eq. can be expressed as an explicit function of 
p, which we develop in the next few paragraphs. For ease of expression we will 
usually refer to the entanglement of formation simply as "the entanglement." 

Our formula for entanglement makes use of what can be called the "spin 
flip" transformation, which is a function applicable both to state vectors and 
to density matrices of an arbitrary number of qubits. For a pure state of a 
single qubit, the spin flip, which we denote by a tilde, is defined by 

\i')=CTy\r), (4) 

where is the complex conjugate of I?/') when it is expressed in a fixed 
basis such as {| t), I i)}, and ay expressed in that same basis is the matrix 

For a spin-| particle this is the standard time reversal operation 

and indeed reverses the direction of the spin [|T^. To perform a spin flip on 
n qubits, one applies the above transformation to each individual qubit. If 
the system is described by a density matrix rather than a state vector, each 
ay is applied on both the right and the left. For example, for a general state 
p of two qubits — the object of interest in this Letter — the spin-flipped state 
is 



P = (0-2 ® 0"2)P*(0-2 ® (T2), 



(5) 



where again the complex conjugate is taken in the standard basis, which for 



a pair of spin-| particles is {| IT), | Ti), | it), 
is equivalent |Tl| to "complex conjugation in the magic basis 
in Ref. g. 



II)}. In this case the spin flip 
which appears 
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Though we have introduced the spin flip transformation primarily to deal 
with mixed states, the concept is also convenient for expressing the entan- 
glement of a pure state of two qubits. One can show that this entanglement, 
defined in Eq. (||), can be written as 

E{^)=S{C{ij)), (6) 
where the "concurrence" C is defined as 

c{ij) = \{mi (7) 

and the function S is given by 



£iC) = log, log, . 

(8) 

The function S{C) is monotonically increasing, and ranges from to 1 as 
C goes from to 1, so that one can take the concurrence as a measure 
of entanglement in its own right. For example, the singlet state \ ip ) = 
75^1 ~ I ^^^^ unchanged by a spin flip (except for an overall 

negative sign), so that its concurrence K'^IV')! is equal to 1. At the other 
extreme, an unentangled, or factorizable, pure state such as | ti) is always 
mapped by the spin flip transformation into an orthogonal state, so that its 
concurrence is zero. Later we will use another fact about S{C), namely, that 
it is a convex function (that is, curving upward). 

Having defined the spin flip and the function S{C), we can now present 
the promised formula for the entanglement of formation of a mixed state p 
of two qubits: 

E{p)=S{C{p)), (9) 

where 

C{p) = max {0, Ai - A, - A3 - A4}, (10) 

and th e A^s are the eigenvalues, in decreasing order, of the Hermitian matrix 
R = ^ ^p^- Alternatively, one can say that the AjS are the square roots 
of the eigenvalues of the non-Hermitian matrix pp. Note that each Aj is a 
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non-negative real number. The matrices R and pp may seem unlikely objects 
to be using in any formula, but one can see that they are closely related to 
the pure-state concurrence of Eq. (|^). In fact for a pure state R has only 
one eigenvalue that may be nonzero, namely, C{ip). 

The formula (|^) was shown in Ref. to be correct for all density matrices 
of two qubits having no more than two nonzero eigenvalues. More recently, 
Smolin has tested the formula numerically on several thousand randomly 
chosen two-qubit density matrices and has found complete agreement [|1^ 



Most of the rest of this Letter is devoted to proving that the formula is cor- 
rect for arbitrary states of this system. We will find that the value £{C{p)) 
of the average entanglement can always be achieved by a decomposition of 
p consisting of four or fewer pure states, each state having the same entan- 
glement. (Uhlmann has already shown that the optimal decomposition must 
consist of pure states with equal entanglement |T1], but we do not assume 



this result in our proof.) We will then show that no decomposition has a 
smaller average entanglement. 

Our method will be to look explicitly for an entanglement-minimizing 
decomposition of p. We use the fact that every decomposition of a density 



matrix can be obtained via the following prescription [13|. First, find a 
complete set of orthogonal eigenvectors \vi) corresponding to the nonzero 
eigenvalues of p, and "subnormalize" these vectors so that {vi\vi) is equal to 
the zth eigenvalue. Every decomposition (lifi)} of p can then be obtained 
through the following equation, and every set of states that can be obtained 
in this way is a legitimate decomposition of p: 

\yo^) = jzuUv,)■ (11) 

Here n is the rank of p, that is, the number of vectors \vi), and U is an 
m X m unitary matrix, m being greater than or equal to n. (The complex 
conjugation is included only for later convenience.) Alternatively, since only 
the first n columns of U are used, we can take [/ to be an m x n matrix whose 
columns are orthonormal vectors. If m is greater than n, the decomposition 
will have more elements than are necessary for the creation of p, but such 



decompositions are certainly allowed. The states \wi) in Eq. (|Tl|) are auto- 
matically subnormalized so that {wi\wi) is equal to the probability of \wi) in 
the decomposition. We can thus write p = J2i \uii){wi\. In what follows, we 
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express all decompositions of p in terms of such subnormalized vectors. 

It is helpful to consider separately two classes of density matrix: (i) those 
for which Ai — A2 — A3 — A4 is positive or zero, and (ii) those for which the 
same combination is negative. Again, the numbers A, are the eigenvalues of 
the matrix R = ^J~^/pp^^- We consider class (i) first. 

For any density matrix p in this class, we will define successively three 
specific decompositions of p, the last of which will be the optimal decompo- 
sition that we seek. Each of these decompositions consists of exactly n pure 
states, n being the rank of p as above. For the system we are considering, n 
is always less than or equal to 4. 

The first decomposition consists of states i = 1, . . . ,n, satisfying 



{xi\xj) = Xi6, 



(12) 



The states \xi) can be said to be "tilde-orthogonal." We obtain such a 
decomposition as follows. First note that if the set is defined via an 

T2, X n unitary matrix U as in Eq. (11), then the "tilde inner products" {xi\xj) 
can be written as 



= ([/r[/^),„ (13) 

where Tij = {vi\vj) is a symmetric but not necessarily Hermitian matrix. (The 
states \vi) are the eigenstates of p defined earlier.) In order that condition 
(|12D be satisfied, we want UtU^ to be diagonal. It happens that for any 
symmetric matrix r, one can always find a unitary U that diagonalizes r 
in this way |T^. Moreover, the diagonal elements of UrU'^ can always be 
made real and non-negative, in which case they are the square roots of the 
eigenvalues of rr*. (To see how this works, note that U must diagonalize 
TT* in the usual sense; that is, Utt*U^ is diagonal.) The square roots of the 
eigenvalues of rr* are the same as the eigenvalues of i?, so that condition 
(|12D is fulfilled as long as the diagonalizing matrix U is chosen in such a way 
that the numbers Aj appear in their proper order. Thus one can always find 
a decomposition with the desired property. It is interesting to note that the 
vectors \xi) of this decomposition are right-eigenvectors of the non-Hermitian 
matrix pp. One can see this by writing p as X^i \xi){xi\ and using Eq. ([T^) . 
We could in fact have used this property to give an alternative specification 
of the ensemble 
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Our second decomposition of p, which we label {\yi)}, i = l,...,n, is 
hardly different from the first: 



m/ I 1/, ^^^^ 

IVj) = A^j) for j 1- 
It is indeed physically equivalent to the first decomposition, but the phase 
factors will become important shortly when we take linear combinations of 
these vectors. 

The decomposition {\yi)} typically does not have a small average entan- 
glement, but it does have a property that will make it useful for finding 
an optimal ensemble. In order to express this property, let us define the 
"preconcurrence" c of a pure state lip) to be 

where we have allowed for the possibility that 1-0) may be subnormalized. 
Note that the preconcurrence is the same as the concurrence of Eq. (|^ but 
without the absolute value sign. The decomposition {\yi)} is special in that 
its average preconcurrence has the value C{p) of Eq. (|^). To see this, recall 
that the probability of the state \yi) in the decomposition is {yi\yi), so that 
the average preconcurrence is 

{c) = T.iy^\y^)7!t\ = T.iy^\y^)■ (16) 



The sum can be evaluated immediately from Eqs. (|12D and ([14D , yielding 
(c) = Ai — A2 — A3 — A4 = C(p). Here we have used the fact that if n < 4, 
the numbers Aj with i > n are all zero. 

We would like to find a decomposition that, like {\yi)}, has (c) = C{p), 
but which also has the property that the preconcurrence (and hence the 
concurrence) of each individual state is equal to C{p). It would then follow 
immediately that the average entanglement is S{C{p)), since this would be 
the entanglement of each state in the decomposition. In seeking such a 
decomposition, we will confine ourselves to transformations that leave the 
average preconcurrence unchanged, and use these transformations to adjust 
the individual preconcurrences until they are all the same. The result will 
be our final decomposition of p. 
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Now, any decomposition with n elements can be written in terms of the 
states l^j) via the equation 

n 

\^^) = T.y:M. (17) 

where 1/ is an n x n unitary matrix. The average preconcurrence of the 
ensemble {\zi)} is 

(c) = = T^i^yy^h = Tr iVYV''), (18) 

i i 

where Y is the real diagonal matrix defined by Yij = {yi\yj). Thus the 
average preconcurrence is unchanged by any real unitary matrix V (that 
is, any orthogonal matrix), since in that case V'^ = and the trace in 
Eq. (|18D is preserved. 

Even restricting ourselves to orthogonal matrices, we retain more than 
enough freedom to make the preconcurrences of the individual states equal. 
One way to do this is as follows. First, select the two states \yi) with the 
largest and smallest values of the preconcurrence. Since the set {\yi)} has 
the correct average preconcurrence, either all the preconcurrences are already 
equal to C{p), or else the largest one is too large and the smallest one is too 
small (typically negative). In the latter case, consider the set of positive- 
determinant orthogonal transformations that act only on these two extreme 
states as in Eq. ([17D , changing them into new states that we call \za) and \zb). 
(This set of transformations is simply the one-parameter set of rotations in 
two dimensions. It is worth emphasizing, however, that we are not using them 
to rotate the vector space; rather, we are directly forming new linear combi- 
nations of the two specified states. The other states \yi) are not changed.) 
Among this set of transformations is one that simply interchanges the two 
extreme states and thus interchanges their preconcurrences. Therefore, by 
continuity there must exist an intermediate transformation that makes the 
preconcurrence of \za) equal to C{p). Perform this transformation, thereby 
fixing one element of the ensemble to have the correct concurrence. Next, 
consider the remaining n — 1 states, that is, \zb) and the remaining \yi)s, and 
perform the same operation on them. Continuing in this way, one finally ar- 
rives at a set of states all having concurrence equal to C(p). This we take to 
be our final decomposition {l^^j)}, which, as we have argued above, achieves 
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the claimed minimum average entanglement £{C{p)). Thus the value of en- 
tanglement given in our formula can always be attained, at least for the 
case in which Ai — A2 — A3 — A4 > 0. 

We now wish to show that no decomposition of p has a smaller average 
entanglement. For this it is enough to show that no decomposition has a 
smaller average concurrence: the average entanglement cannot be less than 
£{{C)) because of the convexity of the function £. Now, the average concur- 
rence of a general decomposition is given by an equation similar to Eq. (|1^) 
but with an absolute value sign: 

{C) = Y.\{VYV%1 (19) 

i 

Here y is an m x n matrix whose n columns are orthonormal vectors. The 
dimension m of these vectors can be arbitrarily large, since the decomposition 
may consist of an arbitrarily large number of pure states (though prior results 
guarantee that one need not consider values of m larger than sixteen ) . In 
terms of the components of V and F, we can write the average concurrence 
as 

(0 = E|E(^^.)%|- (20) 

To obtain the desired lower bound on this sum, we need use only the fact 
that |(^j)^| = 1- That is, we can show that for any complex numbers a^j 
such that X^i = 1) we have 

^|5:a,,y,,|>Ai-A2-A3-A4. (21) 

i j 

The proof is straightforward: first note that there is no loss of generality in 
taking each an to be real and positive. (The phases of the other atjs can be 
changed to compensate.) Then we can say 



> Ai — A2 — A3 — A4 
= C{p). 



(22) 
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(Again we are using the fact that any Xj with j > n is zero.) Thus no 
decomposition of p can achieve an average concurrence lower than C{p) or 
an average entanglement lower than S{C{p)). 

There remains one case to consider, namely, density matrices for which 
Ai — A2 — A3 — A4 < 0. For these density matrices our formula predicts that the 
entanglement should be zero, that is, that there should be a decomposition 
of p into unentangled pure states. To show that this is indeed the case, we 
again start with the decomposition {\xi)},i = 1, . . . ,n, of Eq. (0). If n is 
equal to 3 — the values n = 1 and n = 2 are not possible for the case we are 
now considering — it is convenient to supplement this set with a dummy state 
1x4) equal to the zero vector. From the complete set we directly form our 
final decomposition 



ki) = 


\ 




\xi) + 




X2) + e'^^ 


a^s) + 


eie4| 


\Z2) = 


\ 




\xi) + 




X2) - e*^3 


2^3) - 




\Z3) = 


\ 




- 




X2) + e*^3 


xz) - 




\Zi) = 


\ 




kl) - 


gi92 


X2) - e*^3 


x^) + 





Xi)) 



(23) 



where the phase factors are chosen so that 

Ee^^^^A, = 0. (24) 

Such phase factors can always be found when Ai < A2 + A3 + A4 (Ai being 
the largest of the four numbers as always). The condition (^) together with 



the property (12) of the set guarantee that each state \zi) has zero 

concurrence and hence zero entanglement. This completes the proof of the 
formula (H). 

Our formula makes possible the easy evaluation of entanglement of for- 
mation for a pair of qubits, and should thus facilitate the investigation of 
any number of questions concerning entanglement. However, there remains 
a very basic question concerning the interpretation of the entanglement of 
formation that has not yet been resolved. For any pure state of a bipar- 
tite system, the entanglement £'('?/') defined in Eq. (|^) has a very simple and 



elegant interpretation [|T^: if two separated observers Alice and Bob start 



out with no shared entanglement, then in order for them to create many 
pairs in the state I'i/'), such that Alice ends up with one member of each pair 



10 



and Bob has the other, it is necessary that for each pair produced, at least 
E{ip) qubits must pass across an imaginary plane separating Alice and Bob; 
moreover, as the number of pairs approaches infinity, the number of trans- 
mitted qubits needed per pair can be made arbitrarily close to E^ip). That is, 
E{iIj) measures the amount of quantum information that must be exchanged 
between Alice and Bob in order to create the state It seems likely that 
one can apply the same interpretation to the entanglement of formation of a 
mixed state 0, but this conclusion depends on a property of E{p) that has 



not yet been demonstrated |jT8|. The question is whether E{p) is additive, 
that is, whether, if Alice and Bob have n pairs in the state p, the entangle- 
ment of formation of that whole system is exactly n times the entanglement 
of formation of a single pair and not less. In mathematical terms, the issue 
is whether E{p®'^) = nE{p). It is conceivable that the formula proved in this 
Letter will help to settle this question in the case of qubits, but more likely 
an entirely different and more general argument will have to be found. If it is 
determined that E{p) is indeed additive, then this finding will considerably 
strengthen the physical interpretation of our formula. 

I would like to thank a number of colleagues whose comments and sug- 
gestions have been of great help in this work: Valerie Coffman, Scott Hill, 
Joydip Kundu, Hideo Mabuchi, Michael Nielsen, David Park, Eric Rains, 
John Smolin, Ashish Thapliyal, and especially Chris Fuchs. 



11 



References 



[1] C. H. Bennett, G. Brassard, C. Crepeau, R. Jozsa, A. Peres, and 
W. K. Wootters, Phys. Rev. Lett. 70, 1895 (1993). 

[2] C. H. Bennett and S. J. Wiesner, Phys. Rev. Lett. 69, 2881 (1992). 

[3] E. Schrodinger, Proc. Cambridge Philo. Soc. 31, 555 (1935). 

[4] C. H. Bennett, H. J. Bernstein, S. Popescu, and B. Schumacher, 
Phys. Rev. A, 53, 2046 (1996); S. Popescu, D. Rohrhch, "On the mea- 
sure of entanglement for pure states," |quant-ph/9610044 . 



[5] C. H. Bennett, G. Brassard, S. Popescu, B. Schumacher, J. Smohn and 
W. K. Wootters, Phys. Rev. Lett. 76, 722 (1996); V. Vedral, M. B. Ple- 
nio, M. A. Rippin, and P. L. Knight, Phys. Rev. Lett. 78, 2275 (1997); 
N. J. Cerf and C. Adami, "Quantum information theory of entanglement 
and measurement," |quant-ph / 9605039] ; V. Vedral, M. B. Plenio, "En- 
tanglement Measures and Purification Procedures," |quant-ph /9 70 7035 



M. Lewenstein and A. Sanpera, "Separability and entanglement of com- 
posite quantum systems," |quant-ph / 9707043[ 

[6] C. H. Bennett, D. P. DiVincenzo, J. Smolin, and W. K. Wootters, 
Phys. Rev. A 54, 3824 (1996). 



[7; 

[8 

[9 
[10 

[11 
[12 



See, for example, D. P. DiVincenzo, Science 270, 255 (1995). 

See, for example, C. A. Fuchs, N. Gisin, R. B. Griffiths, C-S. Niu, and 
A. Peres, Phys. Rev. A, 56, 1163 (1997) and references cited therein. 

S. Hill and W. K. Wootters, Phys. Rev. Lett. 78, 5022 (1997). 

J. J. Sakurai, Modern Quantum Mechanics, San Fu Tuan, ed. (Ben- 
jamin/Cummings, Menlo Park, CA, 1985), p. 277. 

The equivalence was pointed out to the author by V. Coffman and 
J. Kundu. 

J. Smolin, private communication. 



12 



[13] E. Schrddinger, Proc. Cambridge Philo. Soc. 32, 446 (1936); N. Had- 
jisavvas, Lett. Math. Phys. 5, 327 (1981); L. P. Hughston, R. Jozsa, and 
W. K. Wootters, Phys. Lett. A 183, 14 (1993). 

[14] A. Uhlmann (unpublished). 

[15] R. A. Horn and C. R. Johnson, Matrix Analysis (Cambridge University 
Press, New York, 1985), p. 205. 

[16] A. Uhlmann, "Optimizing entropy relative to a channel or a subalgebra," 
|quant-ph/970101^ . Evidence that four states are sufficient can be found 
in F. Benatti, H. Narnhofer, and A. Uhlmann, Rep. Math. Phys. 38, 123 
(1996). 

[17] This interpretation follows directly from the results in Ref. [^. 
[18] S. Popescu, private communication. 



13 



